
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21e8fdda-68d9-3c89-81a7-99958f0ed958.roa
File: 21e8fdda-68d9-3c89-81a7-99958f0ed958.roa (raw, json)
Hash identifier: w6P7G8BT7g96gNXcYnUp7AMf4u/w4C3jcQljc41Ts4w=
Subject key identifier: 6D:1E:B9:DD:44:F2:4B:D1:25:AA:6F:F3:07:0B:E3:80:79:54:FC:6B
Certificate issuer: /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial: 010D0C9F4328584EF01CE757102D7D6692865380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21e8fdda-68d9-3c89-81a7-99958f0ed958.roa
Signing time: Mon 24 Aug 2026 01:00:12 +0000
ROA not before: Mon 24 Aug 2026 01:00:12 +0000
ROA not after: Sun 22 Nov 2026 02:00:12 +0000
asID: 834
IP address blocks: 172.252.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f0:1c:e7:57:10:2d:7d:66:92:86:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
Validity
Not Before: Aug 24 01:00:12 2026 GMT
Not After : Nov 22 02:00:12 2026 GMT
Subject: CN=96ef3bc0-f35e-482a-a2bd-25bf065ad23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:e3:76:8d:0e:8d:e5:ad:fc:41:36:a5:d7:
bc:16:ba:22:c9:d3:d5:cc:67:cf:80:62:12:ae:8f:
a9:cf:bd:89:95:e5:8c:bf:39:c4:04:6b:71:cc:6d:
8e:3e:e5:1b:99:28:e5:f0:92:26:fe:91:31:09:af:
f6:fc:97:7c:d4:cf:24:06:ef:11:9e:7c:23:f1:43:
c8:16:0c:9c:61:bb:79:7a:fa:df:10:ad:02:27:31:
70:46:1a:99:e6:99:62:be:e7:c0:8b:a4:f4:25:66:
c0:d0:4d:8c:e5:e9:16:f8:d4:fc:e9:1c:28:0d:56:
ce:9b:d9:b8:0e:5f:b4:2c:23:10:be:5a:28:c1:cf:
20:b0:18:68:ba:44:68:3a:6a:68:f4:6a:74:c2:f5:
f4:04:fc:95:42:39:cd:8c:fd:b9:98:da:91:cd:8d:
5e:6f:2f:0c:7e:90:7c:36:28:c9:20:8d:b1:95:71:
0e:79:ce:a8:df:a3:dc:9e:d6:65:f1:18:ec:9e:4b:
02:33:a6:55:00:51:d0:dd:97:15:b9:65:ae:bd:6b:
c3:a0:c6:23:df:9f:60:41:1d:ad:5f:f1:49:f6:cc:
cc:21:ad:d7:2f:b1:91:2f:ca:52:0b:9b:d1:3a:ce:
6f:77:f0:c5:5c:9c:19:95:ae:c0:de:f8:be:fd:9a:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:B9:DD:44:F2:4B:D1:25:AA:6F:F3:07:0B:E3:80:79:54:FC:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21e8fdda-68d9-3c89-81a7-99958f0ed958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
X509v3 Authority Key Identifier:
keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:11:ba:e3:78:9c:31:11:65:8c:af:96:fc:4f:65:0b:8a:00:
ce:6d:f5:84:21:f5:88:8b:02:92:3d:0a:22:38:61:94:13:17:
af:b8:51:e3:4a:c3:aa:29:ba:41:f9:43:4e:14:a3:ec:30:c7:
97:dd:93:1e:73:cc:9f:76:77:3a:87:5c:1a:0b:c4:4c:af:0d:
1f:f1:0e:ac:a1:f5:cb:e1:f2:35:07:0d:29:5a:ca:a5:46:f1:
d9:aa:ae:1b:50:eb:d8:39:79:6a:69:3e:76:1e:69:a9:a8:fa:
a2:3f:8e:56:1b:50:7d:1a:44:b0:70:54:77:d1:f9:b4:9a:2f:
3f:b3:95:2d:4f:bf:16:37:20:35:10:e1:a9:03:f8:cc:f0:93:
88:c5:9a:a8:b2:3c:95:ec:8c:77:79:c3:3a:be:ab:5f:b9:93:
60:0d:ac:97:e6:b1:df:ca:46:96:a4:f3:f5:b0:f8:d6:f7:12:
c0:98:b5:f2:6d:34:05:c2:95:7f:4d:2d:7b:7c:00:74:6f:5b:
bc:16:34:09:e3:13:75:ae:d6:19:62:82:8b:70:fe:ad:13:23:
30:79:61:bb:a6:ca:ef:9d:05:7a:11:57:27:18:e5:3b:b4:17:
06:40:3f:a1:c2:f8:a3:22:d6:73:13:32:72:45:ef:2b:e4:ee:
12:ae:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:30:04 2026 by rpki-client